https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-40203.htmlhttps://patchthecve.com/cve/CVE-2023-40203.htmlWed, 17 Jun 2026 06:16:42 +0000MEDIUM 4.3: Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4.https://patchthecve.com/cve/CVE-2024-8735.htmlhttps://patchthecve.com/cve/CVE-2024-8735.htmlWed, 17 Jun 2026 08:23:12 +0000MEDIUM 6.1: The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web https://patchthecve.com/cve/CVE-2024-8726.htmlhttps://patchthecve.com/cve/CVE-2024-8726.htmlWed, 17 Jun 2026 08:23:11 +0000MEDIUM 6.1: The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.3. This makes it possible for unauthenticated attackers to inject arbitrary web scrihttps://patchthecve.com/cve/CVE-2024-9614.htmlhttps://patchthecve.com/cve/CVE-2024-9614.htmlWed, 17 Jun 2026 08:24:55 +0000MEDIUM 6.1: The Constant Contact Forms by MailMunch plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary whttps://patchthecve.com/cve/CVE-2024-31378.htmlhttps://patchthecve.com/cve/CVE-2024-31378.htmlWed, 17 Jun 2026 07:28:19 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.1.https://patchthecve.com/cve/CVE-2024-31349.htmlhttps://patchthecve.com/cve/CVE-2024-31349.htmlWed, 17 Jun 2026 07:28:16 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailMunch – Grow your Email List allows Stored XSS.This issue affects MailMunch – Grow your Email List: from n/a through 3.1.6.https://patchthecve.com/cve/CVE-2024-29793.htmlhttps://patchthecve.com/cve/CVE-2024-29793.htmlWed, 17 Jun 2026 07:23:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MailMunch MailChimp Forms by MailMunch allows Stored XSS.This issue affects MailChimp Forms by MailMunch: from n/a through 3.2.2.